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We consider here systems with piecewise Unear dynamics that are periodically sampled with a given 
period T. At each sampling time, the mode of the system, i.e., the parameters of the linear dynamics, 
can be switched, according to a switching rule. Such systems can be modelled as a special form of 
hybrid automata, called "switched systems", that are automata with an infinite real state space. The 
problem is to find a switching rule that guarantees the system to still be in a given area V at the next 
sampling time, and so on indefinitely. In this paper, we will consider two approaches: the indirect 
one that abstracts the system under the form of a finite discrete event system, and the direct one that 
works on the continuous state space. 

Our methods rely on previous works, but we specialize them to a simplified context (linearity, periodic 
switching instants, absence of control input), which is motivated by the features of a focused case 
study: a DC-DC boost converter built by electronics laboratory SATIE (ENS Cachan). Our enhanced 
methods allow us to treat successfully this real-hfe example. 



1 Introduction 

We are interested here in finding rules for switching the modes of (piecewise) linear systems in order to 
make the variables of the system stay within the limits of given area V . The systems that we consider 
are periodically sampled with a given period T. Between two sampling times, the variables follow a 
certain system of linear differential equations, corresponding to a mode among several other ones. At 
each sampling time, the mode of the system can be switched. Such systems can be modelled as a special 
form of hybrid automata, called "switched systems", that are automata with an infinite real state space. 
The problem that we consider here is to find a switching rule that selects a mode ensuring that the system 
will still be in V at the next sampling time, and so on indefinitely. 

Note that, here, we do not impose that the systems always lies within V between two sampling times, 
only at sampling times: if the system goes out of V between two sampling times, then, due to continuity 
reasons and because of the "small" size of t, it will still stay within the close neighborhood of V , and we 
assume that such a small deviation is acceptable for the system. This makes the problem simpler than the 
one considered, e.g. in [2], where the system is forced to always stay within V . 

Note also that the problem here is simpler than the one considered in yj], because, here, only the 
switching rule has to be determined, since the control input is fixed. (In llT2l . the dynamics is of the form 
x{t) =Ax{t) +Bu{t), where u{t) is not constant, but an input to be synthesized.) 

Finally, our problem is much simplified by the fact that, as in Q, the switching instants can only 
occur at times of the form ix with / G N. 

As noted in Q, there are two approaches for solving this kind of problem: 

- the indirect approach reduces first the system, via abstraction, into a discrete event system (typically, 
a finite-state automaton); this is done in, e.g., [7 |. One can thus identify cycles in the graph of the abstract 
system, thus inferring possible patterns of modes that enforces the system to stay forever within V . 
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- the direct approach works directly on the continuous state space; this is done, e.g., in |T|. One can 
thus infer a controllable subspace V'ofV, within which the existence of a switching rule allowing to stay 
forever within V' is guaranteed (see, e.g., lfT2l l9l'). 

Often, in the indirect approach, the switching rule can be computed offline (under, e.g., the form of a 
repeated pattern of modes), while the switching rule has to be computed on line in the direct approach. 

Our methods basically rely on previous works, but we specialize them to the simplified context (lin- 
earity, periodic switching instants, absence of control input), which is motivated by the features of a 
focused case study: a DC-DC boost converter built by electronics laboratory SATIE (ENS Cachan) for 
the automative industry. Our enhanced methods allow us to treat successfully this real-life example. 

2 Indirect Approach: Approximately Bisimular Methods 
2.1 Sampled Switched Systems 

In this paper, we consider a subclass of hybrid systems JH, called "switched systems" in ||7l. 
Definition 1 A switched system £ is a quadruple (M",P, ^,F) where: 

• R" is the state space 

• P = {I,. . . , m} is a finite set o/ modes, 

• ^ is a subset of J/'(R>o,P) which denotes the set of piecewise constant functions from M>o to P, 
continuous from the right and with a finite number of discontinuities on every bounded interval of 

M>o 

• F = {fp \ p G P} is a collection of functions indexed by P. 

For all p G P,sNe denote by Zp the continuous subsystem of £ defined by the differential equation: 

x(0=/p(x(0). 

A switching signal of E is a function p € the discontinuities of p are called switching times. A 
piecewise function x : M>o — )• M" is said to be a trajectory of £ if it is continuous and there exists a 
switching signal p G ^ such that, at each t S M>o, x is continuously differentiable and satisfies: 

x(0=/p(o(x(0)- 

We will use x(f,A:,p) to denote the point reached at time t G M>o from the initial condition x under the 
swiching signal x. Let us remark that a trajectory of is a trajectory of £ associated with the constant 
signal x(f) = p, for all t G M>o. 

In this paper, we focus on the case of linear switched systems: for all p £ P, the function fp is defined 
by fp{x) = ApX + bp where Ap is a (n x ?i)-matrix of constant elements {aij)p and bp is a «-vector of 
constant elements {bk)p- 

In the following, as in Q, we will work with trajectories of duration z for some chosen T G M>o, 
called "time sampling parameter". This can be seen as a sampling process. Particularly, we suppose that 
switching instants can only occur at times of the form iz with / G N. In the following, we will consider 
transition systems that describe trajectories of duration T, for some given time sampling parameter T G 
M>o. 

Definition 2 Let £ = (M",P, ^,F) be a switched system and z G M>o a time sampling parameter. The 
T-sampled transition system associated to Z, denoted by Tt:{L) , is the transition system (2,—)-?) defined 
by: 

• the set of states is Q = W 
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• the transition relation is given by 

X — x iffx{T,x,p) = X 
Let us define: Posti{X) = {x' \x x' for some x G X}, and 

Prei{X) = {x' I / — ;>!j;ic for some x G X}. For the sake of brevity, we will me, Posti{x) insteadof Po^fjdx}) 
and Pre,-{x) instead of Prei{{x}). 

Example 1 This example is a boost DC-DC converter with one switching cell ( see Fig. |7]) that is taken 
from /[Ti/ (see also, e.g., SSl |5] [77]/ ). The boost converter has two operation modes depending on the 
position of the switching cell. The state of the system is x{t) = [ii{t),Vc{t)]^ where ii{t) is the inductor 
current and Vc{t) the capacitor voltage. The dynamics associated with both modes are of the form x{t) = 
Apx{t) + bp (p = 1,2) with 

^-(^' -i^ ^-(s) 

4 ^ _ ,t, ^ ' ' ro+rc ^ xi ro+r^ 
2 — I J_ rp _ X rp 

\ Xc ro+r,. Xc ro+rc 

It is clear that the boost converter is an example of a switched system. We will use the numerical values 
of 12]' = 70, X/ = 3, = 0.005, ri = 0.05, = 1, = 1. The goal of the boost converter is to regulate 
the output voltage across the load tq. This control problem is usually reformulated as a current reference 
scheme. Then, the goal is to keep the inductor current ii{t) around a reference value f^^K This can be 
done, for instance, by synthesizing a controller that keeps the state of the switched system in an invariant 
set centered around the reference value. An example of switching rule is illustrated on Fig. |2] This rule is 
periodic of period T^: the mode is 2 on (0, ^] and 1 on (^,7"^]- A. 





Figure 1: Electric scheme of the boost DC-DC converter (1 cell) 




Figure 2: A switching rule for the 1-cell boost DC-DC converter on one period of length T^ (here, T = ^, 
and the pattern of the switching rule is (2.1.1.1)) 
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2.2 Approximate bisimulation 

In Q, the authors propose a method for abstracting a switched system under the form of a discrete 
symbohc model, that is equivalent to the original one, under certain Lyapunov-based stability conditions. 
They use an Euclidian metric ||.||, and define the approximation of the set of states M" as follows: 

[R"]r^={xeR" \xi = ki^, kieZ,i=l,...,n}, 

where 17 S M>o is a state space discretization parameter. The transition relation T^{T.) is approximated as 
follows: Let q E [K"]rj and q^ = x{r,q,p) such that q -^Tr{i.p) Qe in real system, let q' G with 
ll^e — ^'11 < 17. Then we have q -^t^^(^z^;) q' for the approximated transition relation. The approximate 
transition system T^^y^iJL) is defined as follows: 

Definition 3 The system T^^rj (^) the transition system (Q, -^^,7]) defined by: 

• the set of states is Q = 

• the transition relation is given by 

q^r,ri 4 'J||x(t,<7,p) -^'11 < T] 

where ||.|| is any metric on M". 
The notion of "approximate bisimilarity" between systems Ti{^ and Ti^-\-^{^ is defined as follows: 
Definition 4 Systems Tt:{L) and T^^-^i^) are e-bisimilar if: 

1- {\\x-q\\<e ^q ^^T:^r]4) =^ ||^'-'?'||<£ 

for some x' = x(t,x, p) ( i.e. for some x' : x — x'), and 

2. {\\x-q\\ < e Ax x') =^> ||/-g'||<e 

for some q' € : \\x(T,q,p) —q'\\ < T] (i.e. for some q' : q -^^,ri 4)- 

The following theorem is given in [71 . 

Theorem 1 Consider a switched system £ = (M",P, 3^,F) with HP = o5^(]R+,P), a desired precision e 
and a time sampling value T. Under certain Lyapunov-based stabilization conditions, there exists a space 
sampling value 77 such that the transition systems TtI^) and ,j(r) are approximately bisimilar with 
precision E. 

One can guarantee an arbitrary precision e by choosing an appropriate f] : there exists an explicit algebric 
relation between e and 17. Furthermore, under certain conditions (stability of T^{L)), the symbolic model 
Tt ,^ (r) has a finite number of states. One can then use standard techniques of model checking in order 
to synthesize a safe switching rule on T^^iJL) (e.g., letting the system always in the safe area), see e.g. 
m [TOl. The switching rule on TT:^r\(X) can also be used to enforce the real system Pr(r) to behave 
correctly. 

2.3 Simplification for the Case of Linear Dynamics 

By focusing on linear dynamics, we are allowed to simplify the more general method of fT\ as follows: 

1 . We are using the infinity norm in order to remove the overlapping of two adjacents bowls of radius 77 
(reducing it to a set with a norm 0). This is done to prevent non-determinism. Therefore, [M"]j7 has 
to be changed according to the use of this norm. From now on, [M"],j = {x \ Xi = Ikf] k gIj} 
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2. The computation of Lyapunov functions are not necessary in our particular case but can be done 
by simply computing the infinite sum of a geometric serie to ensure the £-bisimulation. Stability 
criterion relies simply on the eigenvalues of matrices A,- having negative real part. The proof of 
e-bisimilarity is based on the fact that {5^8 + Tj < £ (which is true for some rj when jS^ < 1) (See 
||6l for more details). 



3. Due to the presence of the exponential of a matrix, the computation of the image of all the points 
could be very costly. By using the linearity of the system, we can compute the same results for a 
fraction of the initial cost. This is explained in ||61. 



Example 2 Our simplified method is applied on the boost converter of Example^ z = 0.5, V corre- 
sponding to ii G [3,3.4] and Vc € [1.5,1.8], £ = 3.0, r\ = 1/40|^ See Fig. [jj/or one of the connected 
component of the full graph. Each cycle in the graph corresponds to a periodic control of the converter 
which ensures that the electric variables lie inside the predefined V up to £. For example, we consider the 
cycle going through the vertices: 159,243, 173,257, 187,271,201,285,215,299, 

229, 159. This corresponds to the periodic mode control of pattern 12121212122. The result of a simula- 
tion under this periodic switching rule is given in Fig. ^^or a starting point xq = (3.0, 1.79). The box V 
is delimited by the red lines. One can see that the system largely exceeds the limits ofV (but stays inside 
the E-approximation). 



3 Direct Approach: Inference of Controllable Subspace 



The direct approach works directly on the continuous state space; this is done, e.g., in ||2l. One can 
thus infer a controllable subspace V' oiV , within which the existence of a switching rule allowing to stay 
forever within V' is guaranteed (see, e.g., ^2, 9|). We present here a simplified direct method that exploits 
the simple features of our framework: linearity, absence of perturbation u, periodicity of the switching 
instants. 

Consider a box V C M" and a time sampling value z. The following Algorithm [T] computes a set of 
controllable polyhedra. Intuitively, after the k''^ iteration of the loop, Controlj is a set of states satisfying 
the following property: there exists a sequence of modes a of length k starting with mode / such that a 
applied to any state of Control prevents the system to go out of V at any sampling time; alternatively, 
after the k''^ iteration, Uncontrol is a set of states for which, for all sequence a, there exists a prefix a' 
which makes the system go outside V. Note that the termination of the procedure is not guaranteed due 
to the fact that there are infinitely many polyhedral sets. 



The values used are not the same as the ones used by the authors of Q due to a rescaling done in (7) 
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Figure 3: Synthesized finite-state automaton for 1-ceIl converter witli i] = ^ and V corresponding to 
// e [3,3.4] andv,. € [1.5,1.8] 




Figure 4: Projected simulation with // on the abscissa, and Vc on the ordinates of 1-cell converter for 
switching rule (12121212122)* starting point aq = (3.0, 1.79) ; The box V = [3,3.4] x [1.5, 1.8] is drawn 
in red. (£ = 2.6) 
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Algorithm 1: Synthesis of controllable subspace 



input : A switched system £ with m modes 
input : A time sampling value T 
input : A box V C M" 

output: A controllable subspace V' = {Controli}j=\ j„ 

1 Uncontrolnew '■= V 

2 for / = l..m do 

3 1^ Controli := V 

4 repeat 

5 Uncontrol '.= Uncontrolnew 

6 for i = \. .m do 

7 1^ Controli '.= Controli\P re i{Uncontrol) 

8 U ncontrolnew •= ^ \ U^'li Controli 

9 until Uncontrolnew = Uncontrol; 
10 return V' = IJili Control 



The correctness of Algorithm [T]relies on the following fact: 
Theorem 2 If Algorithm^terminates with output V', then Posti{V') C V' for all I <i <m. 
In order to prove Theorem[2} we need the two following propositions. 

Proposition 1 Let x,x' G M". Then the three following items are equivalent: 

• X = x' 

• Posti{x) = Post i{x') for all I <i <m 

• Prei{x) ^ Prei{x') for all \ <i <m 

Proof 

We only consider Linear Differential Equations, for any x G M" Card{Posti{x)) = Card{Prei{x)) = 1. 
The proof is immediate from Cauchy-Lipschitz Theorem. □ 

Proposition! LetA,B<^W\ We have: 

1. Posti(A\B) = Post i{A)\ Post i{B) and similary for Prei for all 1 < ileqm. 

2. Posti {Prei {A)) = Prei{Posti{A)) = A. 

Proof 

Let A,B C M" and / G {l..m}. We have: 

1 . Let y G Posti \ ^) ■ Then xW^y for some x G A \ B. Therefore y G Posti (^) since x G A . Let 
suppose that y G Posti{B) then x' y for some x' G B. By Proposition [T] x = x' which raises a 
contradiction. Therefore y Posti{B) and y G Poi'f;(A) \Posti{B). 

Let 3^ G Po5f,(A) \ Posti{B). Therefore, y G Po5f,(A) and x — )-t j for some x G A. However, 

y Poi'?, (B) , therefore Vx' G B, x' j. It follows that x G A \ B. Therefore y G Posti {A\B) □ 

2. We know that Card{Posti{Prei{x))) = 1 and it is immediate that x G Posti{Prei{x)) therefore 
{x} = Posti{Prei{x)). Therefore Posti{Prei{A)) = A and by the same type of proof 
Prei{Posti{A)) = A. □ 



We can now prove Theorem [2] 
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Proof of Theorem H 

We will denote by Controlf the value of ControU at the iteration of the algorithm. Suppose that the 

Algorithm terminates at iteration n. Therefore, at iteration n, Uncontrolnew = Uncontrol. Let 

X G Control" for a given / G {l..m}. Suppose that Posti{x) V' then Posti{x) G Uncontrol„i,u.. Therefore 

Posti{x) G Uncontrol. By Proposition [2| x G Pre {{Uncontrol), but we have that 

Control" = Control"^ ^ \ Prei{Uncontrol). Therefore x does not belong to Control" which raises a 

contradiction. Therefore Posti{x) G V and Postiiy') C V □ 

In other words, the output set V' of controllable polyhedra is invariant. Let us point out that the system 

may temporarily go out of V between two sampling instants. 

It immediately follows from Theorem |2] that, at any sampling time iz, any point in V' C V, is 
controllable: there exists a mode j that ensures that the point at next sampling time (/ + 1)t is still in V' . 
Note that, unlike the indirect method, the appropriate mode cannot be precomputed, but has to be found 
on line. On the other hand, the system lies exactly within V C V at each sampling time (instead of lying 
within the £-closeness of V using the indirect method). 

Algorithm [T] involves the computation of the Pre-image of (union of) convex polyhedra. We have (see 
161 for a proof): 

Lemma 1 Let z G M>o and S a convex set ofM" and i a mode ofL. Then 
Prei{S) is a convex set ofM". 

From this Lemma, we can compute the Pre,-iinage of any convex polyhedron by simply computing the 
Pre,-image of its vertices. 

Unfortunately, Algorithm [T] also involves the computation of union, complementation, and test of 
equality of polyhedra, that are operations known to be very expensive. To overcome this problem, one 
can approximate all the manipulated objects using the notion of griddy polyhedra (see [2, 4|), i.e., sets 
that can be written as unions of closed unit hypercubes with integer vertices. The price to be paid is an 
underapproximation of the controllability subspace, but this kind of compromise seems unavoidable, as 
pointed out in [2| . 

Example 3 To illustrate this approach, we are computing a control for the boost DC-DC converter with 
one cell, see Example^^or a description of the system. The resulting control presented in Fig. ^has 
been obtained for the following parameters: V corresponding to ii G [3.0,3.4] and Vc G [1.5, 1.8], 
T = 0.5 andxo = (3.01, 1.79). The Fig. |6| can be decomposed into 4 parts: 

• Two big vertical polyhedra. The left one represents the zone controllable with mode 1, the right 
one with mode 2. 

• Two small horizontal polyhedra ( upper right and lower left) are the uncontrollable zones ofV^ 

A trajectory starting from point xq = (3.01, 1.79) belonging to the controllable subset, and using an 
on-line computation of the switching rule, has been depicted on Fig. |6] and^^or a simulation. One can 
see that the trajectory always stays within V (not only at the sampling instants). 

4 Application to a 3-cells DC-DC Boost Converter 

Our method is scalable to bigger systems as we illustrate with the boost DC-DC converter with 3 cells. 
This is a real-life system built by the electronics laboratory SATIE (ENS Cachan) for the automative 
industry. See Fig. |7]for a picture of the system. 



^They are delimited by vertices: (3, 1.5); (3.1092, 1.5); (3.1 1 10, 1.5107); (3.0000, 1.5107) and 

(3.2611, 1.7897); (3.4, 1.788); (3.4, 1.8); (3.2611, 1.8). 
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Figure 5: Simulation of tiie 1-celI boost converter starting from point xq = (3.01 , 1 .79) that belongs to the 
controllable subspace of [3.0,3.4] x [1.5, 1.8]. Above: simulation of Vc during time; below: simulation of 




Figure 6: Controllable subspaces of the boost DC-DC converter (1 cell) from xq = (3.01, 1.79) within 
V = [3.0,3.4] X [1.5,1.8] 



44 



Synthesis of Switching Rules for Ensuring Reachability Properties of Sampled Linear Systems 




Figure 7: 3-cells converter built by laboratory SATIE 



4.1 Model 

The boost DC-DC converter with 3 cells relies on the same principle as the one with one cell. An 
advantage of this model is its robustness: even if one switching cell is damaged, the system is still 
controllable with the restricted set of modes that remain available. This system is naturally more 
complex: There are 4 continuous variables of interest (instead of two), and 2^ = 8 modes (instead of 
two). The electrical scheme is presented in Fig. [8] An example of pattern of periodic switching rule is 
presented in Fig. |9j 



Figure 9: Switching rule for the 3-cells boost DC-DC converter on one period of length (here, oc = ^, 
T = ^ , ai = ( 1 .0^ ) , 02 = (0^ . 1 .0^ ) , 03 = (O'^ . 1 .0) , and the pattern of the corresponding switching rule is 



Celli Cellj Cell, 




Figure 8: Electrical scheme of the DC-DC converter with 3 cells 




(2.1.3.1.5.1)) 



The system satisfies the following equations: 
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That can be rewritten to fit our framework as: 
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4.2 Indirect Method 

Here are the parameters that we used: T] = 1/5 which corresponds to £ = 21.6, a = 5, = 1/10000, 
T= 1/60000. Vis defined by: [5.3,5.9] x [5.3,5.9] x [5.3,5.9] x [15.5,16.5]. 

Over a period = 6t, the switching rule (see Fig. |9]) corresponds to: 100000 for ai, 001000 for 02 and 
000010 for 03, which can be represented by the global pattern (100,000,010,000,001,000) The abstract 
system for box V corresponds to a big graph composed of many repeated pattern: a small part of the full 
graph is given in Fig. flO) A typical cycle can be seen through states 290,311,332,353,332,311,290 this 




Figure 10: A part of the abstract graph synthesized for the 3-cell converter of the 3-cells boost converter 
using the indirect method 

corresponds to the pattern modes 444121. The construction of the full graph (including some 
optimizations, like the deletion of vertices from which every rule leads to a deadend) took less than 2 
minutes. 
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From this graph, we extracted several cycles that correspond to different switching rules. We have 
simulated the system starting from point xq = (5.4, 5.4, 5.4, 16) for such various rules. The result of one 
simulation for one of them (viz., (444121)*) is given in Fig. [TT] We can see that, under all these 




Figure 11: Simulation of the 3-cells Converter under Switching Rule (333010)* 

controls, the system goes out of the initial V. However we can check that the system stays within the 
£-overapproximation of V with £ = 21.6. Let us point out incidentally that such an e is much too gross 
to guarantee a realistic precision. Rather than presenting the results of the indirect approach with a better 
precision (using a finer Tj-grid), we present henceforth the results obtained with the direct approach. 



4.3 Direct Method 

For V = [4,7] X [4,7] x [4,7] x [15, 17], T = 1 /60000, we can extract a controllable subspace V' CV. A 
simulation of the system starting from xq = (5,5,5, 16) G V is presented in Fig. 12 (see also Fig. 13 for 
a projected simulation). We can check on the figure that all the simulation lies within V. 



4.4 Control on failure 

We have also experimented the methods in a case of failure of one switching cell of the 3-cells boost 
converter: we have supposed that the cell 1 is stuck on position open (cTi = 0), which means that only 4 
of the 8 modes are still available. The description of our experiments is beyond the scope of this paper. 
Let us just point out that we were able to find a switching rule for this downgraded context using the 
direct method, but not with the indirect approach. 
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Figure 13: Various projections on plans {xi,Xj) (for ij G {1,...,4}) of simulations of the 3-cells boost 
converter starting fromxo = (5,5,5, 16) in y = [4,7] x [4,7] x [4,7] x [15, 17] 
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5 Final Remarks 

We have explained how to improve two methods (the direct and indirect ones) for synthesizing control of 
a piecewise linear system by exploiting the special features of a framework met in the case of a real-case 
example. Our experiments show that the advantage of the indirect method is to allow the user to 
precompute a periodic control rule at the price of a certain loss of precision. On the other hand, the direct 
method relies on a on-line computation of the switching rule, but allows us to satisfy exact reachability 
invariance properties. Furthermore, the direct method seems to be able to treat more easily limit cases 
where the system works in a downgraded configuration due to a failure of one its components. 
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